workflow-setup

SUSPICIOUS: the skill is broadly aligned with workflow management, but it grants the agent high-impact automation control and depends on an under-verified external okou CLI supplied by the runtime. No direct malware, credential harvesting, or exfiltration path is shown, yet the persistent autonomous-action capability and unresolved binary provenance make the overall risk medium-to-high.